{"id":"CVE-2026-121187","kind":"vulnerability","aliases":["CVE-2026-121187"],"related":[],"title":"Chrome: Paint flaw lets a crafted web page leak sensitive information","description":"Observable discrepancy in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)","summary":"Google Chrome's Paint component has an observable discrepancy that a remote attacker can exploit through a crafted HTML page to obtain sensitive information. Chromium rates the issue Medium severity.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browsers","chrome","endpoints","runtime"],"not_affected_if":["chrome-up-to-date"],"how_to_check":"- Check the installed Chrome version in Chrome's About page or with `google-chrome --version`\n- Confirm whether the version is below `157.0.8103.38`","fix":"- Google Chrome: move to `157.0.8103.38` or later","status":"open","published_at":"2026-11-03T21:17:27+00:00","first_seen_at":"2026-11-03T21:19:25+00:00","triaged_at":"2026-11-03T21:23:01+00:00","updated_at":"2026-11-03T21:23:01+00:00","category":"runtime","confidence":0.7,"triage":{"at":"2026-11-03T21:23:01Z","model":"claude-haiku-5-5","output":{"fix":"- Google Chrome: move to `157.0.8103.38` or later","reach":"internet","title":"Chrome: Paint flaw lets a crafted web page leak sensitive information","impact":"low","summary":"Google Chrome's Paint component has an observable discrepancy that a remote attacker can exploit through a crafted HTML page to obtain sensitive information. Chromium rates the issue Medium severity.","audience":"everyone","category":"runtime","nicknames":[],"who_cares":["chrome","browsers","endpoints"],"confidence":0.7,"fix_status":"available","needs_auth":"no","worst_case":"Attacker reads sensitive information from the browser via a crafted page","analyst_note":"","how_to_check":"- Check the installed Chrome version in Chrome's About page or with `google-chrome --version`\n- Confirm whether the version is below `157.0.8103.38`","plain_action":"Update Google Chrome to version 157.0.8103.38 or later: Chrome menu > Help > About Google Chrome.","needs_analyst":false,"not_affected_if":["chrome-up-to-date"],"who_is_affected":"Anyone browsing with Google Chrome builds before 157.0.8103.38 can be targeted by a crafted HTML page that an attacker controls. Managed fleets that pin Chrome versions or delay updates are the ones most likely to stay exposed. Browsers already on 157.0.8103.38 or later are not affected.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"medium"},"cost_usd":0.000679,"input_tokens":4099,"output_tokens":538,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-121187':14A,17A '-2026':13A,16A '157.0.8103.38':61C 'allow':62C 'attack':34B,65C 'browser':18B 'chrome':1A,19B,23B,58C 'chromium':46B,75C 'compon':26B 'craft':6A,39B,72C 'cve':12A,15A 'discrep':30B,53C 'endpoint':20B 'exploit':36B 'flaw':3A 'googl':22B,57C 'html':40B,73C 'inform':11A,45B,69C 'issu':49B 'leak':9A 'let':4A 'medium':50B,78C 'observ':29B,52C 'obtain':43B,67C 'page':8A,41B,74C 'paint':2A,25B,55C 'prior':59C 'rate':47B 'remot':33B,64C 'runtim':21B 'secur':76C 'sensit':10A,44B,68C 'sever':51B,77C 'via':70C 'web':7A","nicknames":[],"mitigations":[],"who_affected":"Anyone browsing with Google Chrome builds before 157.0.8103.38 can be targeted by a crafted HTML page that an attacker controls. Managed fleets that pin Chrome versions or delay updates are the ones most likely to stay exposed. Browsers already on 157.0.8103.38 or later are not affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Google Chrome to version 157.0.8103.38 or later: Chrome menu > Help > About Google Chrome.","pkeys":[],"ptokens":[],"labels":["browsers","chrome","endpoints","medium","runtime"],"campaign_type":null,"first_public_at":"2026-11-03T21:17:27+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121187","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121187","severity":null,"published_at":"2026-11-03T21:17:27+00:00","modified_at":"2026-11-03T21:17:27+00:00","first_seen_at":"2026-11-03T21:19:25+00:00","fetched_at":"2026-11-03T21:19:25+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}